This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
File:                     QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json)
Hash identifier:          T4Qe37JDNmbK+WZnv+ebXYtHAi6gPcrQOBTtufaxnIY=
Subject key identifier:   1B:25:15:EC:56:81:D4:BA:8B:AE:7C:EE:4D:0B:DF:E9:9D:4E:B7:A0
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Certificate issuer:       /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial:       019B330CE27C7862DB3B2166C5D4DA74E1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
Manifest number:          179D
Signing time:             Thu 18 Dec 2025 20:00:40 +0000
Manifest this update:     Thu 18 Dec 2025 20:00:40 +0000
Manifest next update:     Fri 19 Dec 2025 20:00:40 +0000
Files and hashes:         1: 0esZKuZd06vTF3egbk7SFqajsIo.roa (hash: P0O/NDwq3sTeK/AsSKKPK6Qr+cdWA34yW0U7UgVxZHg=)
                          2: 1-F-5SWsecFgzI5NahgeczUF5j-k.roa (hash: AjzylbQuDtMZ4CoZ2EqAKKte+m5xBNBNs+Oy65Y8EM0=)
                          3: 18mEs4Z6fHdJG430-23p2cFj4nQ.roa (hash: XgIw9SVi9pdHmgi87nMtAixIsiQxYMsUyuBvpp1vRoM=)
                          4: 4URO2C3ml1u1p3j0aVym-OypCmw.roa (hash: FBodq3AGj9I/WrFusJYGhp0BteIh9N9SY38AbrciYWk=)
                          5: 4kN15Qz33KWG-k_wyu7EQgr4Ils.roa (hash: DH8jYa3viVWroHhQ/Zl/Da/2bPMlT/7wPrIYxkW1NQg=)
                          6: 7qGCgpIfKLXoJsT35rezDziDBhA.roa (hash: 5kmqeNrinp9lsuCAyZflpq/OiszbJU7jNmzUel6IR+E=)
                          7: GAgtr-CLltTm3C54wjvqWFoClvc.roa (hash: T0Jdg0AtA8XIyCNcIqmAhfTPx4CQ0IlZ0iFHA879hp4=)
                          8: HiGziAUktoRlyueuC0_hHiCDmQ8.roa (hash: Zd8qY4C57ymLYCj+tu0BUy3+rQ0+nsTQu2oauKzI3OY=)
                          9: HxipHT46tv6qA61seP-3FDc3m84.roa (hash: dvYRTvtnN6xoSKyBzydQ1i2HWHdep/QnlIOV+ZIODek=)
                          10: JcQ4XnNNuhCFCptegJ4OikKt6EI.roa (hash: V4uiHg1qNVTGH4cwLosCcAcAuUHU5FHwvSgPuESRx7Y=)
                          11: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: 0VM34RZq9Hw+qJeipXUsRZBsrXV0EdOwd0RKwtjWxoU=)
                          12: QVpDsEjXaPZQ4FGjN9dHcrQXvHg.roa (hash: HCD6w2XxMAQn0SFhGHQKXXLIjCxVrY39/u5TIy7CNM8=)
                          13: Qx_J7jmO9FA5ot9sLpTDu4FLMuk.roa (hash: xVEwITmL9MXivRj3o3NBJyNSskTvQ/xcCcoWznjHvCA=)
                          14: RNDoaXvvOX22MpXmc3Ff_6K2Zr0.roa (hash: 9ScFJyBJ0ntBcGgka6vn0/EsUriLP41MonbDidIqsxk=)
                          15: UtpSRhJuNLlPda0ealCAV2oOOIs.roa (hash: 6zNva/R7MgFInq/rTlig5RzR+MH92GbfZMeRaso1csA=)
                          16: V8-ToP-No1rRKocG9Fs66tbVPI4.roa (hash: 3qNiQpHlS6gZhDgIm5wv39p+3u8Q/oiUqHr5QNsynkQ=)
                          17: aCzvft-4bbV7rBYNhvjtTU8ZwVY.roa (hash: LyfD0ZqEZ95kmtswsVkI/tj5kthO2U488G+9z2mp6gg=)
                          18: anyb0S2isVZ6Se4Mftij8iSLpPk.roa (hash: 8kZzLUilTF5CneX4LxuRFJNuwebJiucwE+f4bJOwZpY=)
                          19: cLHJ9pzG4jNGxgoAoRMirT2Ejso.roa (hash: Jzxa7wOrH3SZg3F+/QPuNnZeQarhGQ5yhFav2kPWjJ0=)
                          20: fBfUR6cRr_u4DYWWZmS_hYnQZ5Q.roa (hash: 05oduoCdD8sRASgQ0YU8ZbDS+ABzI42Cxlh4jYIQnOQ=)
                          21: g6Ig0jPNMe4MAMvjeIRw4JirdDE.roa (hash: T/0IJy2q1IYoff/aamZ+EqRudnpk7iGpLvKCXPLYje0=)
                          22: glVWs7IQA6E4icmC8qXaL1BO1oU.roa (hash: wAwxqn0T2Tg7SmJ7QKis7shqbxTq4mypLKV5b5C3kXg=)
                          23: kL3chxghDnQX5YSzwgkNCMx_3uM.roa (hash: ARDIceVeEM1YjdBNdcn8ziSYK6i63yZ+Nxd3mBgB/OM=)
                          24: khxB07onbtl0gHz8-6pLaDUUqYo.roa (hash: MoQ9KdSAj5hEESTK4yNZR+E8klzqWct22REysr25b/w=)
                          25: lKXrokKPFOF3aznjmWojVE7APiQ.roa (hash: PRGVlrmspET+S9gMw9HSgp3fT7nUxwmOOvlgERWds3M=)
                          26: lwFhyNroYMkQgFt_MTCY-0ovIkY.roa (hash: 1cg2wbluv89aBz3Ew/AMkAQmXEZmttxmEyT4CRchZCk=)
                          27: mGKAEj4vix5wz3Ty3D3Z9imeAeQ.roa (hash: 7m/WWG8HyJT1ynclkVB1QY12OwlKq+o8CXSQO/8ksHU=)
                          28: nGljitgno8Zg_3gTd1NL8ga4UlY.roa (hash: rg8O6DW4r5DhXeJAjPcwuhjgZqT37lpRRlPUN2MFmGk=)
                          29: pfnbvP54fI2mKR09iIt0xfdp0co.roa (hash: TpvSBeXjgBs6iHcMA91RD8MXDqtM3kW6rNOmftw2zXc=)
                          30: twN006NWSqIAzyJjBefGoakpUcI.roa (hash: Dw9Jbr5s1oT+R6tnGBJCmZXohfgBB+1HIADmJwaJ7IA=)
                          31: vz4FDF2gfGl5OFBOv__Tj3GzeKc.roa (hash: furrlju/pz4ChU7gEiXr6biSh/xldhy2BubaPv4xD0A=)
                          32: z1ig7aoRTuKmXolXHeCPJnQNUmU.roa (hash: ap2ra/J0tJE90DV+8e0IqRR4O5YRXCSyArsS7EtAi0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:0c:e2:7c:78:62:db:3b:21:66:c5:d4:da:74:e1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
        Validity
            Not Before: Dec 18 20:00:40 2025 GMT
            Not After : Dec 19 20:00:40 2025 GMT
        Subject: CN=1b2515ec5681d4ba8bae7cee4d0bdfe99d4eb7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:10:35:ac:ac:d4:3b:fc:6c:d4:e0:94:b2:d9:
                    2c:e3:e1:61:7a:2d:9a:4a:67:37:8d:8e:0e:59:b0:
                    5f:7c:60:19:eb:ce:b1:fb:38:d1:67:64:ed:35:c1:
                    e7:ad:b3:18:46:02:a3:a1:63:8e:34:05:d1:a6:34:
                    dc:03:dd:72:57:b0:92:e2:5f:d9:91:2e:93:95:75:
                    00:02:9f:92:32:ca:99:df:9e:1a:01:86:ce:7a:a5:
                    17:6a:69:25:19:18:a5:11:79:d1:4b:c4:94:cd:8c:
                    1e:a5:44:20:a7:ce:ea:ba:9f:0e:60:84:e3:30:d9:
                    95:16:0e:aa:e1:d4:9e:63:c3:97:de:a0:b6:87:34:
                    e0:62:31:4a:3c:23:c9:95:0e:ed:36:4e:99:ba:46:
                    a1:b4:6e:f1:6c:7d:b3:51:eb:19:17:d5:c9:7c:5c:
                    3a:e2:9a:a9:bc:e1:9a:75:a3:f8:87:5d:36:bd:d7:
                    4f:e7:95:6d:54:69:be:89:ed:4a:8e:c2:78:96:a8:
                    f8:aa:39:5c:78:ab:12:c0:90:d7:75:ce:ee:3c:2e:
                    3b:ba:2c:42:3f:e8:f4:c6:77:e9:7a:e6:fe:2e:05:
                    0b:3d:b5:d4:7a:42:ac:6e:90:fa:d0:fb:8a:15:a7:
                    ca:51:06:79:07:87:21:33:87:00:9c:a6:40:da:47:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:25:15:EC:56:81:D4:BA:8B:AE:7C:EE:4D:0B:DF:E9:9D:4E:B7:A0
            X509v3 Authority Key Identifier:
                keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e9:05:b4:60:39:db:c7:fb:1d:0b:c1:39:d6:0f:8a:e2:88:
         46:21:27:4e:9b:16:38:65:91:ee:2c:1d:25:bb:81:96:a3:2c:
         21:f5:6f:a3:77:4e:96:87:bc:19:24:d2:f4:21:5f:8b:a0:c9:
         f5:15:00:92:49:ad:b8:0e:01:77:5a:2b:36:b2:69:8b:71:16:
         64:3b:0d:e6:e1:23:ca:d2:ed:8b:6b:1f:73:54:cd:86:e7:c3:
         e8:6d:75:6c:0b:10:65:a6:f3:ac:e7:a4:ac:81:b2:19:ed:39:
         c9:8e:d5:30:2d:20:23:c8:9f:3d:0f:7d:c4:df:36:c7:1b:e1:
         69:b2:5b:c7:de:1b:d3:58:50:d5:ad:d5:11:4a:87:45:ca:5d:
         d1:61:58:52:7f:49:44:e1:67:7e:68:cd:32:71:44:4e:49:53:
         7f:3e:b5:19:1e:0a:55:fe:0f:f5:27:39:93:e6:47:36:23:6a:
         5b:84:a7:97:f3:e6:cb:f0:92:89:21:01:cc:d5:4a:34:9a:a0:
         7e:ca:78:3e:18:63:b9:f9:73:b9:46:f9:39:4a:83:2f:0d:06:
         da:cf:9a:ce:f4:29:f4:77:b0:76:9c:7e:0f:20:04:28:4e:c1:
         99:76:47:7d:d7:64:4d:df:d7:e2:80:32:f1:bb:d0:6f:31:01:
         f2:18:c3:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZszDOJ8eGLbOyFmxdTadOGyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj
M2YwMGEwHhcNMjUxMjE4MjAwMDQwWhcNMjUxMjE5MjAwMDQwWjAzMTEwLwYDVQQD
EygxYjI1MTVlYzU2ODFkNGJhOGJhZTdjZWU0ZDBiZGZlOTlkNGViN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hA1rKzUO/xs1OCUstks4+Fhei2a
Smc3jY4OWbBffGAZ686x+zjRZ2TtNcHnrbMYRgKjoWOONAXRpjTcA91yV7CS4l/Z
kS6TlXUAAp+SMsqZ354aAYbOeqUXamklGRilEXnRS8SUzYwepUQgp87qup8OYITj
MNmVFg6q4dSeY8OX3qC2hzTgYjFKPCPJlQ7tNk6ZukahtG7xbH2zUesZF9XJfFw6
4pqpvOGadaP4h102vddP55VtVGm+ie1KjsJ4lqj4qjlceKsSwJDXdc7uPC47uixC
P+j0xnfpeub+LgULPbXUekKsbpD60PuKFafKUQZ5B4chM4cAnKZA2kc6VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBslFexWgdS6i6587k0L3+mdTregMB8GA1UdIwQY
MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt
YjI3ZDZlMjc4ZTE4LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4
LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOkFtGA5
28f7HQvBOdYPiuKIRiEnTpsWOGWR7iwdJbuBlqMsIfVvo3dOloe8GSTS9CFfi6DJ
9RUAkkmtuA4Bd1orNrJpi3EWZDsN5uEjytLti2sfc1TNhufD6G11bAsQZabzrOek
rIGyGe05yY7VMC0gI8ifPQ99xN82xxvhabJbx94b01hQ1a3VEUqHRcpd0WFYUn9J
ROFnfmjNMnFETklTfz61GR4KVf4P9Sc5k+ZHNiNqW4Snl/Pmy/CSiSEBzNVKNJqg
fsp4PhhjuflzuUb5OUqDLw0G2s+azvQp9Hewdpx+DyAEKE7BmXZHfddkTd/X4oAy
8bvQbzEB8hjDoA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 02:02:38 2025 by rpki-client